Palo Alto Networks PSE-STRATA-ASSOCIATE Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA-ASSOCIATE Online Questions & Answers

• Question 1:

  Implementation of which PAN-OS feature improves visibility and prevention of malware?

  A. Anti-Spyware profiles
  B. Data Filtering profiles
  C. Decryption profiles
  D. Antivirus profiles
  A. Anti-Spyware profiles

• Question 2:

  Which Palo Alto Networks product offers a centrally managed firewall update process?

  A. SD_WAN
  B. Prisma SaaS
  C. Panorama
  D. WildFire
  C. Panorama

• Question 3:

  Which Next-Generation Firewall (NGFW) deployment model allows an organization to monitor trafficduring evaluations without interruption to network traffic?

  A. Layer 2
  B. TAP mode
  C. virtual wire
  D. Layer 3
  B. TAP mode

• Question 4:

  A firewall enabled as a decryption broker will take which of the following actions?

  A. forward clear text traffic to security chains for additional enforcement
  B. monitor the state of active connections to determine which network packets to allow through
  C. correlate a series of related threat events that indicate a likely compromised host on the network
  D. identify potential denial-of-service (DoS) attacks and take protective action
  C. correlate a series of related threat events that indicate a likely compromised host on the network

• Question 5:

  Which deployment method is used to integrate a firewall to be inline in an existing network but does not support additional routing or switching?

  A. virtual wire
  B. TAP mode
  C. Layer 3
  D. Layer 2
  A. virtual wire

• Question 6:

  What file is needed from a firewall to generate a Security Lifecycle Review (SLR) report when creating the SLR?

  A. tech support file
  B. Panorama plugin registration file
  C. stats dump file
  D. system process core file
  C. stats dump file

• Question 7:

  The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known aswhat?

  A. LLDP profiles
  B. security zones
  C. DHCP groups
  D. security profile groups
  B. security zones

• Question 8:

  Which of the following is an advantage of the Palo Alto Networks Next-Generation Firewall (NGFW)?

  A. Docker containerscan be run on the hardware to add features.
  B. It identifies applications by port number and protocol.
  C. It is well positioned in the network to do more than provide access control.
  D. Customers can create their own mix of security vendor products.
  C. It is well positioned in the network to do more than provide access control.

• Question 9:

  Which three of the following arefeatures of the Palo Alto Networks Next-Generation Firewall (NGFW) that differentiate it from a stateful inspection firewall? (Choose three.)

  Select 3 Correct Responses

  A. Login-ID
  B. User-ID
  C. App-ID
  D. Network-ID
  E. SSL/SSH Decrypt
  B. User-ID
  C. App-ID
  E. SSL/SSH Decrypt

• Question 10:

  What are three unique benefits of the Palo Alto Networks Content-ID? (Choose three.) Select 3 Correct Responses

  A. micro-segmenting network traffic based on the unique identification number of the content
  B. increasing latency as new threat prevention features are enabled
  C. detecting and preventing known and unknown threats in a single pass
  D. enforcing policy control over unapproved web surfing
  E. proactively identifying and defending against unknown, new, or custom malware and exploits
  C. detecting and preventing known and unknown threats in a single pass
  D. enforcing policy control over unapproved web surfing
  E. proactively identifying and defending against unknown, new, or custom malware and exploits